A Method for User Data Protection Based on Game Theory in Cloud Computing

Transcription

1 , pp A Method for User Data Protection Based on Game Theory in Cloud Computing Xiaohui Li 1, Feng Liu 2, Hongxing Liang 3 1 College of Electrical and Information Engineer, Liaoning University of Technology Jinzhou, Liaoning, , China 2 Shenyang institute of computing technology, Chinese academy of sciences Shenyang, Liaoning, , China 3 Jinzhou Force, Jinzhou, Liaoning , China 1 lixiaohui@ s.bjut.edu.cn Abstract. To protect the security of user data and a safe, controlled service acquisition as the goal, we propose a game service acquisition method which combines trust evaluation with decision management application, designing user-centric data protection restraint mechanisms with mechanism design theory. The method includes user information, trust management, service discovery, service management and revenue information function module. Trust reconciles contradiction between user data protection and cloud services honest offering so that both sides of service reach the perfect Bayesian Nash equilibrium strategies to promote the honest service implementation. Keywords: cloud computing; game theory; data protection 1 Introduction Cloud computing environments due to their specific service delivery exist between cloud users and cloud services with data transfer of ownership, the separation of ownership and control of data, this competitive relationship with economic phenomena have similarities. Therefore, this paper attempts to use game theory and other related tools to solve the corresponding problem. In the cloud service interaction process, cloud users trust evaluation of cloud services, cloud users when faced with multiple service resources, it will be trusted to assess the behavior of their services, if the assessment of credibility, then choose to submit a request, otherwise select other services, empathy cloud services cloud users have to make trust assessments to ensure the safety of the service side, consider cloud from the perspective of the user data protection point of this program is mainly focused on cloud services cloud users trust management. We will interact with the service cloud computing environments as cloud game problems between users and cloud services, cloud services from the perspective of trust evaluation interaction, trust cloud services as a measure of the benefit or payment game party, demonstrate cloud cloud computing environment customer service requests and cloud services is a dynamic game of incomplete information. Game cloud service model proposed acquisition, the program to achieve cloud data ISSN: ASTL Copyright 2017 SERSC

2 security and user privacy protection as the goal, trust management focus, trust mechanisms by providing customized protection services on demand cloud users on this basis. Game theory is used to establish trust between cloud users and cloud services, trust services based on both the refined Bayesian Nash equilibrium strategies designed to promote service integrity cooperation incentives. The rest of this paper is organized as follows. In Section 2, we analysis Game relationship in the cloud environment and related information. In Section 3, we details the method design in two aspects: one is to design ideas and the other is specific program. We also give a specific module implementation for better illustration of our method. Finally, we conclude this paper in Section 4. 2 Cloud Service Game Analysis 2.1 Game Theory Game theory began in 1944 by Von Neumann and Oskar Morgenstern in cooperation with the publication of "Game Theory and Economic Behavior". Nash and Tucker in the 1950s, published an article on the definition and existence of equilibrium, and proposed a "prisoner's dilemma", both of which work laid the cornerstone of the noncooperative game theory [1-4]. Game theory is a problem with this decision and balanced decision-making body of behavioral research more interaction with each other, which emphasizes the interdependence of the parties to the policy decision-making Any one subject must determine their own optimal strategy considering other subjects on the basis of selection strategy. In this sense, game theory is also known as "game theory." Game theory is the essence of the subject must be considered the basis of other body reactions up to choose their own course of action, the results of the game is to produce a balanced, balanced combination of all people who participate in the optimal strategy or action. The main problem in game theory is the study participants with independent interests and rational basis, under certain rule conditions, predict the behavior of other participants and the results of their behavior types (such as cooperation, betrayal, etc.) obtained by comparing, and then decide what action strategies, and ultimately achieve an equilibrium solution of mutual restraint. 2.2 Mechanism Design Theory Mechanism design theory study under freedom of choice, the conditions of incomplete information, design a theoretical mechanism to achieve the objectives set, which can be seen as the integrated use of game theory and social choice theory. In other word, the mechanism designs to provide an incentive to choose their own private information members of society problem analytical framework to consider what kind of game in the form of construction, making the solution of this game is that social Copyright 2017 SERSC 17

3 goals. Social goals here refers to the selection result of the entire social groups, by the players choice by expressing their preferences concluded that the results will in turn affect the choice of each individual players, if the result is a society of social choice result set, places Multi-functions social choice rule indicates [5-8]. 2.3 Dynamic Service Game Analysis Cloud computing is a huge cloud service network composed by a parallel grid, computing power through virtualization technology extension service cloud. Front-end user interface permits the user to select the service through the service catalog, service request and after verification by the system manager to find alternative service resources to select a service in the cloud resource is then provided by the service tool [9]. Cloud computing system logical structure shown in Figure 1. In the cloud computing service interaction environments, from between the cloud user data security and privacy protection angle cloud users and cloud services there are different interests and needs: Cloud user as a cloud service requester, choose a trusted service provider, protection while their rights to obtain services revenue; cloud services as a service provider is to provide the amount of its income. Both hope to eventually achieve a balanced state of mutual restraint results in providing information and services to get the room, so the interactive services cloud computing environment is the behavior of both sides of the game.... User interface System Management Monitoring and Statistics Services Directory Fig. 1. Cloud computing system logical structure 3. Method Design In a cloud computing environment cloud user data protection security program primarily consists of two parts: the trust evaluation and trust-based decision management. The main job is to assess the safety of trust from the cloud services provided to de- 18 Copyright 2017 SERSC

4 scribe the relationship and trust quantify cloud computing environment of trust; Decision management mainly work is service options based on trust, including service discovery, selection and delivery of user data with trusted cloud balance relationship between the user and the service to obtain the release of data for controllable cloud services. To protect the security of user data cloud to cloud services provide a safe and controlled as the goal, the trust portfolio assessment and decision management application, designed to promote the application of mechanism design theory for data protection in the cloud user restraint mechanism center. 3.1 Design Ideas In the course of cloud computing environments in interactive services, cloud users what kind of approach allows to provide a safe and reliable cloud services, safety and security of user data is the core problem. Cloud users as a resource owner, cloud services as a controller of resources, in this sense we principal economics - agent theory to analyze the interaction occurring in the course of service problems and solutions, problems include interest conflict and asymmetric information.trust in the cloudbased service acquisition for analysis, used to calculate the credibility and trust cloud services directly belong to the history of trust and other information prior information on cloud services cloud user feedback evaluation belong posteriori information. trust based service interaction Game process as shown in Figure 2: Cloud services directly trust Cloud Services recommendation trust Priori information Cloud Services Trust quantification Service Discovery Dynamic Decision Correction of Information Service Selection Service behavior feedback Posteriori information Fig. 2. Service selection game information based on trust 3.2 Cloud Users Data Protection Method based on Game In a cloud computing environment to the cloud computing user demand for services - safe and controlled as a starting point, to trust the main line, the introduction of the Copyright 2017 SERSC 19

5 game and restraint mechanisms proposed cloud user data protection solutions. The scenario in the game under restraint mechanism, so that the integrity of the service provider to implement cloud services, through the cloud service node trust evaluation, both for service interaction and user security decisions to provide more detailed and accurate basis. (1) Information Management: including a priori and a posteriori information management information, feedback and historical behavior is mainly historical service management cloud services provide statistical and other information, is updated via the information corrected cloud user services provide the basis for selection; (2) Service Trust Evaluation: First cloud users describe the service description trust, trust quantification of cloud services based on a priori information; (3) Service selection: trust-based service discovery and service selection, as a cloud user's final earnings; (4) User Data Delivery: User data disclosure mode based on trust, the introduction of trust threshold concept triggering cloud service constraints and incentives. (5) Cloud User Decision Management: service selection and user data delivery, in the process of service game interative, cloud users according to Decision Management make the choice of trust threshold and trust management results to deliver data, triggering cloud services restraint mechanism, dynamic management service trust value. In a cloud computing environment, there are between cloud users interact with cloud services over the game, after the process may never again their choice, called the basic game, if we choose the cloud service is called repeated games, repeated games behavior and results are not necessarily duplicate the basic game is simple, because the information side of the game will return information changes, so that the choice game behavior is affected. In repeated games, if fraud occurs, the game process will thus loss of revenue, so participants must fully consider the long-term benefits, rather than choose immediate. In this case, the two sides will conduct cooperation agreement on the formation of constraints. In repeated games, punishment mechanism is often used to trigger strategies, both players find each other once the first tentative cooperation fraudulent or malicious behavior, you are no longer together. Therefore, according to the punishment trigger strategies can contribute to long-term choice between nodes acts to maintain the integrity of the biggest benefits of cooperation. Cloud services are the actors, it is a rational choice of strategy, seeking to maximize returns. Compliance triggering policy, when a malicious service provider, the cooperation will always terminate that application posteriori information feedback, correction of the assessed value of the trust cloud services or increase their choice of trust threshold. Since the cloud user is the later actor in the game, for the cloud service request, based on a priori information needed for cloud services, authorization or refusal to make choices. If the cloud is the first choice of the service user, assuming a priori information is directly assess the value of the trust, the application of trust evaluation methods to assess the value of the service provider trust T [0,1], and when trust of its assessed valuet, cloud users to take selection strategy, otherwise refused; where [0,1] is the setting for cloud services are chosen to trust threshold. If the cloud service is already offered in good faith through service, then do not have to trust 20 Copyright 2017 SERSC

6 this assessment, direct selection, until after the implementation of non-faith service cloud service providers, will never accept their services. Cloud service is the pioneer in the game, it is a rational choice of strategy, seeking to maximize returns. Compliance triggering policy, after a malicious service providing, the cooperation will always terminate that application posteriori information feedback, correction cloud services assessed trust value T 0 or increase trust threshold For cloud services can provide honest service design constraint mechanism is as follows: If a malicious cloud service providers, cloud users will never get the choice to apply; cloud service is honest while providing services, applications, representing because of this honest service offer, the next time its earnings increasing. Dishonest service offered payoff: 1. S f Honest service offered payoff: (0,1] S _ Income S _ Income (1) d S c = S _ Income 1 When Sc Sf the honest cloud service provider will get more benefit. (2) ( Sd _ Income 2 S _ Income) ( S _ Income S _ Income) d (3) 4 Conclusion In this paper, we focus on user data protection issues in cloud computing, propose a Game based method to data protection, while dynamically generate trust relationship to release its own data to achieve balance of privacy protection and services provided,in which we define trust metrics as a dynamic and flexible process that offers a new perspective for decision-making. Firstly,from the perspective of game theory,we describe the interactive of a cloud services and cloud between users as behavior game, trust and decision-making (service selection) is important information for both games. Applying game constraints, incentives both to implement credible behavior. Then to introduce the various components of the method and give examples of partially implemented method. The analysis shows that the performance of our method is obvious and it can apply to cloud computing environment based on trust services acquisition and has guidance for cloud users to select specific service to achieve less privacy loss and more benefits. That high fraud costs make the services and users both sides to implementation faith conduct. This game method can effectively protect users' data and containment malicious service side, from another point of view, it is also beneficial to the security of the service side. Copyright 2017 SERSC 21

7 Acknowledgments The work in this paper has been supported by Liaoning Province Science and Technology Program (SY ). References 1. Deyi Li, Things cornerstone - Cloud Computing [J],Technology tide,2011, 5: ACM SIGCOMM Computer Communication Review, Volume 39, Number 1,2009, pp G. Owen, Game theory, Naval Postgraduate School: Monterey, California, S. Roy et al., A Survey of Game Theory as Applied to Network Security, in Proceedings of the 43rd Hawaii International Conference on System Sciences, pp. 1-10, I. K. Geckil and P. L. Anderson. Applied Game Theory and Strategic Behavior, Chapman & Hall/CRC Press, Yarui Chen,Liqin Tian.Cloud computing model and analysis based on user behavior under dynamic environment Game Theory [J], Journal of Electronic, 2011,39(8): Zhangsheng Bing, Cai Wandong, Li Yongjun. Social network access control method based on game theory [J], Northwestern Polytechnical University,2011,29(4): Tianli Qin, Lin Chuang. Trusted Network in an act of trust-based predictive control mechanisms Game [J], Journal of Computers,2007,30(11): Kuang Sheng Hui, Li Bo cloud computing architecture and application examples analysis [J], Computer and Digital Engineering, Zhang Qiang, Liu Qiang, linear assignment method to improve and Bernardo Study [J]. Industrial Engineering and Management,2009,(1): Xiaohui Li, Jingsha He, Ting Zhang. A service-oriented identity authentication privacy protection method in cloud computing. International Journal of Grid and Distributed Computing, 2013, 6(1): Copyright 2017 SERSC